From af78ed8b6f8b2c184e53defa477ab55d5af1962d Mon Sep 17 00:00:00 2001
From: Daniel Pouzzner <douzzer@wolfssl.com>
Date: Fri, 20 Jun 2025 15:31:31 -0500
Subject: [PATCH] wolfcrypt/src/wc_xmss_impl.c: in
 wc_xmss_bds_state_treehash_complete(), add suppression for false positive
 clang-analyzer-core.NullDereference from LLVM-21 pre20250523+.

---
 wolfcrypt/src/wc_xmss_impl.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/wolfcrypt/src/wc_xmss_impl.c b/wolfcrypt/src/wc_xmss_impl.c
index 15b2184b2..eb1ac452b 100644
--- a/wolfcrypt/src/wc_xmss_impl.c
+++ b/wolfcrypt/src/wc_xmss_impl.c
@@ -2590,7 +2590,7 @@ static void wc_xmss_bds_state_treehash_set_next_idx(BdsState* bds, int i,
 static void wc_xmss_bds_state_treehash_complete(BdsState* bds, int i)
 {
     byte* sk = bds->treeHash + i * 4;
-    sk[3] |= 1 << 7;
+    sk[3] |= 1 << 7; /* // NOLINT(clang-analyzer-core.NullDereference) */
 }
 
 /* Get the tree hash data at specified index for the BDS state.